VYPR
Unrated severityNVD Advisory· Published Jun 6, 2019· Updated Aug 4, 2024

CVE-2019-5219

CVE-2019-5219

Description

There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful exploit could cause a denial of service condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A double free vulnerability in Huawei Mate10 drivers allows a malicious app to cause a denial of service by triggering concurrent resource operations.

Vulnerability

A double free vulnerability exists in certain drivers of Huawei Mate10 smartphones running versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8) [1]. The flaw occurs when multiple processes operate on the same resource simultaneously, leading to a double free condition.

Exploitation

An attacker must trick the user into installing a malicious application [1]. Once installed, the application can cause multiple processes to concurrently access the same resource, triggering the double free.

Impact

Successful exploitation results in a denial of service condition [1]. No other impacts such as code execution or information disclosure are mentioned in the advisory.

Mitigation

Huawei has released a software update to version ALP-AL00B 9.0.0.181(C00E87R2P20T8) to fix this vulnerability [1]. Users should update their devices to the latest firmware. No workarounds are provided.

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

2
  • Huawei/Mate10llm-fuzzy2 versions
    < ALP-AL00B 9.0.0.181(C00E87R2P20T8)+ 1 more
    • (no CPE)range: < ALP-AL00B 9.0.0.181(C00E87R2P20T8)
    • (no CPE)range: Versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.